Theme:
🌙
☀️

Introduction

CyberITC ("we," "our," or "us") is a non-profit organization committed to helping Ohio political subdivisions achieve cybersecurity compliance. We respect your privacy and are committed to protecting any personal information you share with us.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully. By using our website or services, you consent to the practices described in this policy.

Information We Collect

Information You Provide

We may collect information that you voluntarily provide to us, including:

  • Contact information (name, email address, phone number)
  • Organization name and job title
  • Information submitted through consultation request forms
  • Communications you send to us (emails, inquiries, feedback)

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring website or source

How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and consultation requests
  • To provide our cybersecurity compliance services
  • To send you information about our programs, training, and resources
  • To improve our website and services
  • To comply with legal obligations
  • To protect our rights and prevent misuse of our services

Non-Profit Commitment: As a non-profit organization, we do not sell, rent, or trade your personal information to third parties for marketing purposes.

Information Sharing

We may share your information in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist us in operating our website and delivering services (e.g., email service providers, hosting providers)
  • Legal Requirements: When required by law, court order, or governmental authority
  • Protection of Rights: To protect the rights, property, or safety of CyberITC, our users, or others
  • With Your Consent: In any other circumstances where you have given us explicit consent

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Opt-Out: Unsubscribe from our email communications at any time

To exercise any of these rights, please contact us using the information provided below.

Cookies and Tracking

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

  • Remember your preferences (such as dark/light mode)
  • Understand how you use our website
  • Improve our website functionality

You can control cookies through your browser settings. Note that disabling cookies may affect some website functionality.

Third-Party Links

Our website may contain links to third-party websites, such as resources from NIST, CIS, or Ohio state agencies. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

CyberITC

Ohio's Non-Profit Cybersecurity Compliance Resource

privacy@cyberitc.org